[x86/fsgsbase/64] a4e29667d4: double_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: a4e29667d4907b07f821fbb6c22b5f0d11732929 ("x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit")
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 1G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------+------------+------------+
| | fab6b5582e | a4e29667d4 |
+------------------------------------------+------------+------------+
| boot_successes | 8 | 4 |
| boot_failures | 0 | 4 |
| double_fault:#[##] | 0 | 4 |
| RIP:trace_hardirqs_off_thunk | 0 | 4 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 4 |
+------------------------------------------+------------+------------+
[ 0.118278] smpboot: Max logical packages: 2
[ 0.119696] ----------------
[ 0.120058] | NMI testsuite:
[ 0.120451] --------------------
[ 0.120937] remote IPI:
[ 0.118054] double fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
[ 0.119087] Modules linked in:
[ 0.119463] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.16.0-rc1-12668-ga4e2966 #1
[ 0.120000] RIP: 0010:trace_hardirqs_off_thunk+0x4/0x1c
[ 0.120000] RSP: 0000:fffffe0000012000 EFLAGS: 00010087
[ 0.120000] RAX: 0000000081800977 RBX: 0000000000000001 RCX: ffffffff81800977
[ 0.120000] RDX: ffff880034800000 RSI: ffffffffffffffff RDI: ffffffff818014d8
[ 0.120000] RBP: fffffe0000012000 R08: 0000000000000008 R09: 0000000000000000
[ 0.120000] R10: ffffc9000007bd38 R11: ffffffff8332d5a7 R12: 0000000000000001
[ 0.120000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 0.120000] FS: 0000000000000000(0000) GS:ffff880034800000(0000) knlGS:0000000000000000
[ 0.120000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.120000] CR2: fffffe0000011ff8 CR3: 0000000002069001 CR4: 00000000001706a0
[ 0.120000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.120000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.120000] Call Trace:
[ 0.120000] Code: 5b 5d 41 5c 41 5d 41 5e 41 5f c3 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 48 8b 7d 08 e8 50 83 16 00 eb 64 55 48 89 e5 <57> 56 52 51 50 41 50 41 51 41 52 41 53 48 8b 7d 08 e8 d1 7d 16
[ 0.120000] RIP: trace_hardirqs_off_thunk+0x4/0x1c RSP: fffffe0000012000
[ 0.120000] ---[ end trace c2dbc909bdce266b ]---
[ 0.120000] Kernel panic - not syncing: Fatal exception
Elapsed time: 10
#!/bin/bash
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
a3be41a2c9: double_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: a3be41a2c9f6cc51b04a6a322d24b1a48c2ba8b1 ("enable fsgsbase")
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8.3
in testcase: boot
on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 1G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+----------------+------------+------------+
| | 7d852ef40e | a3be41a2c9 |
+----------------+------------+------------+
| boot_successes | 8 | 0 |
+----------------+------------+------------+
[ 0.041258] smpboot: Max logical packages: 2
[ 0.041258] ----------------
[ 0.041258] | NMI testsuite:
[ 0.041397] --------------------
[ 0.041632] remote IPI:
[ 0.042812] double fault: 0000 [#1] SMP
[ 0.043472] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.16.0-rc1-00015-ga3be41a2c #1
[ 0.044000] RIP: 0010:trace_hardirqs_off_thunk+0xf/0x1c
[ 0.044000] RSP: 0000:fffffe0000033000 EFLAGS: 00010083
[ 0.044000] RAX: 0000000081e00997 RBX: 0000000000000001 RCX: ffffffff81e00997
[ 0.044000] RDX: ffff880035a00000 RSI: ffffffffffffffff RDI: ffffffff81e01648
[ 0.044000] RBP: fffffe0000033040 R08: 000000001fffffff R09: 00000000b43e20ef
[ 0.044000] R10: ffff8800357c3d58 R11: 0000000000000001 R12: 0000000000000001
[ 0.044000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 0.044000] FS: 0000000000000000(0000) GS:ffff880035a00000(0000) knlGS:0000000000000000
[ 0.044000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.044000] CR2: fffffe0000032ff8 CR3: 0000000002a69001 CR4: 00000000001706e0
[ 0.044000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.044000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.044000] Call Trace:
[ 0.044000] Code: 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 48 8b 7d 08 e8 73 bb 16 00 eb 34 55 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 <41> 53 48 8b 7d 08 e8 d5 bb 16 00 eb 18 55 48 89 e5 57 56 52 51
[ 0.044000] RIP: trace_hardirqs_off_thunk+0xf/0x1c RSP: fffffe0000033000
[ 0.044000] ---[ end trace 947c459abef92216 ]---
[ 0.044000] Kernel panic - not syncing: Fatal exception
Elapsed time: 10
#!/bin/bash
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
6ba7609623 ("struct page: add field for vm_struct"): BUG: unable to handle kernel paging request at ffffea0003fff208
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/0day-ci/linux/commits/Igor-Stoppa/mm-security-ro-prote...
commit 6ba76096237e785bdf07c47389e0f54d719185dd
Author: Igor Stoppa <igor.stoppa(a)huawei.com>
AuthorDate: Mon Feb 12 18:52:58 2018 +0200
Commit: 0day robot <fengguang.wu(a)intel.com>
CommitDate: Thu Feb 15 12:07:07 2018 +0800
struct page: add field for vm_struct
When a page is used for virtual memory, it is often necessary to obtian
a handler to the corresponding vm_struct, which refers to the virtually
continuous area generated when invoking vmalloc.
The struct page has a "mapping" field, which can be re-used, to store a
pointer to the parent area. This will avoid more expensive searches.
As example, the function find_vm_area is reimplemented, to take advantage
of the newly introduced field.
Signed-off-by: Igor Stoppa <igor.stoppa(a)huawei.com>
5de53ea2a9 genalloc: selftest
6ba7609623 struct page: add field for vm_struct
545854705f Documentation for Pmalloc
+------------------------------------------+------------+------------+------------+
| | 5de53ea2a9 | 6ba7609623 | 545854705f |
+------------------------------------------+------------+------------+------------+
| boot_successes | 30 | 0 | 0 |
| boot_failures | 2 | 13 | 17 |
| Mem-Info | 1 | | |
| RIP:preempt_schedule_notrace | 1 | | |
| BUG:unable_to_handle_kernel | 0 | 13 | 17 |
| Oops:#[##] | 0 | 13 | 17 |
| RIP:find_vm_area | 0 | 13 | 17 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 13 | 17 |
+------------------------------------------+------------+------------+------------+
[ 55.506981] osd: LOADED open-osd 0.2.1
[ 55.508893] Rounding down aligned max_sectors from 4294967295 to 4294967288
[ 55.510058] SSFDC read-only Flash Translation layer
[ 55.510742] platform physmap-flash.0: failed to claim resource 0: [mem 0x08000000-0x07ffffff]
[ 55.511828] slram: not enough parameters.
[ 55.518230] BUG: unable to handle kernel paging request at ffffea0003fff208
[ 55.519041] IP: find_vm_area+0x2e/0x37
[ 55.519502] PGD 1f3f8067 P4D 1f3f8067 PUD 1f3f7067 PMD 0
[ 55.520016] Oops: 0000 [#1] PREEMPT PTI
[ 55.520016] CPU: 0 PID: 1 Comm: swapper Not tainted 4.15.0-10671-g6ba7609 #1
[ 55.520016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 55.520016] RIP: 0010:find_vm_area+0x2e/0x37
[ 55.520016] RSP: 0000:ffff88001f473e18 EFLAGS: 00010286
[ 55.520016] RAX: ffffea0003fff200 RBX: ffffc90001f32000 RCX: 00003ffffffff000
[ 55.520016] RDX: ffffea0000000000 RSI: 0000000000000000 RDI: 80000000fffc8073
[ 55.520016] RBP: ffff88001f473e18 R08: 0000000000000000 R09: 00000000fffc9fff
[ 55.520016] R10: 00000000000fffc8 R11: 00000000000fffc9 R12: ffffc90001f32000
[ 55.520016] R13: 00000000ffffffed R14: 00000000fffc8000 R15: 0000000000000000
[ 55.520016] FS: 0000000000000000(0000) GS:ffffffff82673000(0000) knlGS:0000000000000000
[ 55.520016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 55.520016] CR2: ffffea0003fff208 CR3: 0000000002662001 CR4: 00000000001606b0
[ 55.520016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 55.520016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 55.520016] Call Trace:
[ 55.520016] iounmap+0x4b/0xab
[ 55.520016] doc_probe+0x556/0x576
[ 55.520016] ? set_debug_rodata+0x12/0x12
[ 55.520016] init_nanddoc+0xac/0xc6
[ 55.520016] ? doc_probe+0x576/0x576
[ 55.520016] do_one_initcall+0x98/0x155
[ 55.520016] ? set_debug_rodata+0xb/0x12
[ 55.520016] ? set_debug_rodata+0x12/0x12
[ 55.520016] kernel_init_freeable+0x124/0x1a7
[ 55.520016] ? rest_init+0x1f8/0x1f8
[ 55.520016] kernel_init+0x9/0xe6
[ 55.520016] ret_from_fork+0x24/0x30
[ 55.520016] Code: 00 00 00 00 37 00 00 48 ba fe ff ff ff ff 1f 00 00 48 01 f8 48 39 d0 77 18 55 48 89 e5 e8 05 f4 ff ff 48 85 c0 75 04 31 c0 eb 04 <48> 8b 40 08 5d c3 31 c0 c3 55 31 d2 be d5 05 00 00 48 89 e5 41
[ 55.520016] RIP: find_vm_area+0x2e/0x37 RSP: ffff88001f473e18
[ 55.520016] CR2: ffffea0003fff208
[ 55.520016] ---[ end trace 56333652ebcd8307 ]---
[ 55.520016] Kernel panic - not syncing: Fatal exception
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start eff65047b77d98f572a4b9c1149f136e67b2ab10 7928b2cbe55b2a410a0f5c1f154610059c57b1b2 --
git bisect bad 6b35b49d56b7c3cb579271a0ded57408864b1aa7 # 23:45 B 0 6 19 0 Merge 'jkirsher-next-queue/dev-queue' into devel-spot-201802151942
git bisect bad e4ab1cd1b3d1f5a1e32a73fb9f5235939566b334 # 23:59 B 0 4 17 0 Merge 'regulator/for-next' into devel-spot-201802151942
git bisect good e8cdcb05a03e7b7a1b312baf113f3726bd45888b # 00:13 G 11 0 1 1 Merge 'rockchip/for-next' into devel-spot-201802151942
git bisect good 4f47ffce9d64c0e98f576d0e5f63d4e44a67acb4 # 00:35 G 11 0 2 2 Merge 'linux-review/Yisheng-Xie/staging-android-ion-Some-cleanup-about-ion/20180215-154539' into devel-spot-201802151942
git bisect good bef4408ba0014966c66d937239faaa3941d0be76 # 00:56 G 11 0 0 0 Merge 'scsi/for-next' into devel-spot-201802151942
git bisect good 50933be6062399f1f379ca680175274d70634259 # 01:09 G 11 0 1 1 Merge 'linux-review/Florian-Fainelli/arm64-Make-L1_CACHE_SHIFT-configurable/20180215-124505' into devel-spot-201802151942
git bisect bad 893626ec098e8374e03443361fb8f4701065b4f3 # 01:21 B 0 11 24 0 Merge 'linux-review/Igor-Stoppa/mm-security-ro-protection-for-dynamic-data/20180215-120702' into devel-spot-201802151942
git bisect bad 6ba76096237e785bdf07c47389e0f54d719185dd # 01:32 B 0 6 19 0 struct page: add field for vm_struct
git bisect good 5de53ea2a9361b2a833e752947ae08ee3cbd8770 # 01:45 G 11 0 2 2 genalloc: selftest
# first bad commit: [6ba76096237e785bdf07c47389e0f54d719185dd] struct page: add field for vm_struct
git bisect good 5de53ea2a9361b2a833e752947ae08ee3cbd8770 # 01:55 G 31 0 3 5 genalloc: selftest
# extra tests with debug options
git bisect bad 6ba76096237e785bdf07c47389e0f54d719185dd # 02:12 B 0 11 28 4 struct page: add field for vm_struct
# extra tests on HEAD of linux-devel/devel-spot-201802151942
git bisect bad eff65047b77d98f572a4b9c1149f136e67b2ab10 # 02:13 B 0 13 29 0 0day head guard for 'devel-spot-201802151942'
# extra tests on tree/branch linux-review/Igor-Stoppa/mm-security-ro-protection-for-dynamic-data/20180215-120702
git bisect bad 545854705f0e459f018c1adcdeb50665958148df # 02:30 B 0 5 18 0 Documentation for Pmalloc
# extra tests with first bad commit reverted
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 6 months
[PATCH 4.4 026/108] x86/asm: Fix inline asm call constraints for GCC 4.4
by Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know.
------------------
From: Josh Poimboeuf <jpoimboe(a)redhat.com>
commit 520a13c530aeb5f63e011d668c42db1af19ed349 upstream.
The kernel test bot (run by Xiaolong Ye) reported that the following commit:
f5caf621ee35 ("x86/asm: Fix inline asm call constraints for Clang")
is causing double faults in a kernel compiled with GCC 4.4.
Linus subsequently diagnosed the crash pattern and the buggy commit and found that
the issue is with this code:
register unsigned int __asm_call_sp asm("esp");
#define ASM_CALL_CONSTRAINT "+r" (__asm_call_sp)
Even on a 64-bit kernel, it's using ESP instead of RSP. That causes GCC
to produce the following bogus code:
ffffffff8147461d: 89 e0 mov %esp,%eax
ffffffff8147461f: 4c 89 f7 mov %r14,%rdi
ffffffff81474622: 4c 89 fe mov %r15,%rsi
ffffffff81474625: ba 20 00 00 00 mov $0x20,%edx
ffffffff8147462a: 89 c4 mov %eax,%esp
ffffffff8147462c: e8 bf 52 05 00 callq ffffffff814c98f0 <copy_user_generic_unrolled>
Despite the absurdity of it backing up and restoring the stack pointer
for no reason, the bug is actually the fact that it's only backing up
and restoring the lower 32 bits of the stack pointer. The upper 32 bits
are getting cleared out, corrupting the stack pointer.
So change the '__asm_call_sp' register variable to be associated with
the actual full-size stack pointer.
This also requires changing the __ASM_SEL() macro to be based on the
actual compiled arch size, rather than the CONFIG value, because
CONFIG_X86_64 compiles some files with '-m32' (e.g., realmode and vdso).
Otherwise Clang fails to build the kernel because it complains about the
use of a 64-bit register (RSP) in a 32-bit file.
Reported-and-Bisected-and-Tested-by: kernel test robot <xiaolong.ye(a)intel.com>
Diagnosed-by: Linus Torvalds <torvalds(a)linux-foundation.org>
Signed-off-by: Josh Poimboeuf <jpoimboe(a)redhat.com>
Cc: Alexander Potapenko <glider(a)google.com>
Cc: Andrey Ryabinin <aryabinin(a)virtuozzo.com>
Cc: Andy Lutomirski <luto(a)kernel.org>
Cc: Arnd Bergmann <arnd(a)arndb.de>
Cc: Dmitriy Vyukov <dvyukov(a)google.com>
Cc: LKP <lkp(a)01.org>
Cc: Linus Torvalds <torvalds(a)linux-foundation.org>
Cc: Matthias Kaehlcke <mka(a)chromium.org>
Cc: Miguel Bernal Marin <miguel.bernal.marin(a)linux.intel.com>
Cc: Peter Zijlstra <peterz(a)infradead.org>
Cc: Thomas Gleixner <tglx(a)linutronix.de>
Fixes: f5caf621ee35 ("x86/asm: Fix inline asm call constraints for Clang")
Link: http://lkml.kernel.org/r/20170928215826.6sdpmwtkiydiytim@treble
Signed-off-by: Ingo Molnar <mingo(a)kernel.org>
Cc: Matthias Kaehlcke <mka(a)chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
---
arch/x86/include/asm/asm.h | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
--- a/arch/x86/include/asm/asm.h
+++ b/arch/x86/include/asm/asm.h
@@ -11,10 +11,12 @@
# define __ASM_FORM_COMMA(x) " " #x ","
#endif
-#ifdef CONFIG_X86_32
+#ifndef __x86_64__
+/* 32 bit */
# define __ASM_SEL(a,b) __ASM_FORM(a)
# define __ASM_SEL_RAW(a,b) __ASM_FORM_RAW(a)
#else
+/* 64 bit */
# define __ASM_SEL(a,b) __ASM_FORM(b)
# define __ASM_SEL_RAW(a,b) __ASM_FORM_RAW(b)
#endif
4 years, 6 months
64245e924e ("x86/fsgsbase/64: Enable FSGSBASE by default and .."): double fault: 0000 [#1] SMP PTI
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8.2_
commit 64245e924e50a5bd1d50626b1374aa1a75773395
Author: Andy Lutomirski <luto(a)kernel.org>
AuthorDate: Thu Apr 14 20:24:06 2016 -0700
Commit: Chang S. Bae <chang.seok.bae(a)intel.com>
CommitDate: Wed Feb 14 03:07:31 2018 -0800
x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
Now that FSGSBASE is fully supported, remove unsafe_fsgsbase, enable
FSGSBASE by default, and add nofsgsbase to disable it.
3f2ca6effb attempt to fix non-smp
64245e924e x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
+------------------------------------------+------------+------------+
| | 3f2ca6effb | 64245e924e |
+------------------------------------------+------------+------------+
| boot_successes | 36 | 2 |
| boot_failures | 0 | 11 |
| double_fault:#[##] | 0 | 11 |
| RIP:async_page_fault | 0 | 11 |
| WARNING:kernel_stack | 0 | 11 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 11 |
+------------------------------------------+------------+------------+
[ 0.040019] ----------------
[ 0.040352] | NMI testsuite:
[ 0.040691] --------------------
[ 0.041088] remote IPI: ok |
[ 0.041517] local IPI:
[ 0.041542] double fault: 0000 [#1] SMP PTI
[ 0.042318] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.16.0-rc1-00014-g64245e9 #1
[ 0.043107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.043333] RIP: 0010:async_page_fault+0xe/0x50
[ 0.043333] RSP: 0000:fffffe0000006fb8 EFLAGS: 00010046
[ 0.043333] RAX: 00000000820009f0 RBX: 0000000000000001 RCX: ffffffff820009f0
[ 0.043333] RDX: ffff88001f800000 RSI: ffffffffffffffff RDI: ffffffff82001595
[ 0.043333] RBP: fffffe00000070c0 R08: 00000000c5610c9a R09: 0000000000000004
[ 0.043333] R10: 0000000000000001 R11: 5049206c61636f6c R12: 0000000000000002
[ 0.043333] R13: 0000000000000800 R14: 0000000002a6a001 R15: 0000000000000000
[ 0.043333] FS: 0000000000000000(0000) GS:ffff88001f800000(0000) knlGS:0000000000000000
[ 0.043333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.043333] CR2: fffffe0000006fa8 CR3: 0000000002a6a001 CR4: 00000000001706b0
[ 0.043333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.043333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.043333] Call Trace:
[ 0.043333] WARNING: kernel stack frame pointer at 00000000a49dab43 in swapper/0:1 has bad value 00000000d3079fb3
[ 0.043333] unwind stack type:0 next_sp:00000000cea3d3a8 mask:0x20 graph_idx:0
[ 0.043333] 00000000c60c2bf2: fffffe00000070d9 (0xfffffe00000070d9)
[ 0.043333] 00000000ed62d98d: ffffffff82001595 (error_entry+0xa5/0x130)
[ 0.043333] 00000000a7f675ed: ffffffff82001393 (async_page_fault+0x13/0x50)
[ 0.043333] 000000007aa7ff99: 0000000000000000 ...
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 9caf74006e1099c41ffb488a575031ec11f66353 7928b2cbe55b2a410a0f5c1f154610059c57b1b2 --
git bisect bad eb662735240668a5f288312f2c845fd215359d83 # 10:42 B 0 11 24 0 Merge 'linux-review/Thierry-Reding/drm-tegra-gem-Reshuffle-declarations/20180209-084234' into devel-hourly-2018021506
git bisect bad 4eab7ec6cdfa6cb0fc5ed01048a84b535b2ae939 # 10:51 B 0 11 24 0 Merge 'linux-review/Chao-Gao/KVM-VMX-Don-t-halt-vcpu-when-L1-is-injecting-events-to-L2/20180213-145831' into devel-hourly-2018021506
git bisect good f8278e79ffbd9d37a326cb4ee69cea380e70f00f # 11:05 G 11 0 2 2 Merge 'linux-review/Linus-Walleij/drm-pl111-Fix-regression-from-fbdev-CMA-helper/20180214-025356' into devel-hourly-2018021506
git bisect good b4cd8b665f80849dfd3a17d2e8b0a4c7701b90b3 # 11:22 G 11 0 0 0 Merge 'linux-review/Jeffy-Chen/gpio-keys-Add-support-for-specifying-wakeup-event-action/20180213-111205' into devel-hourly-2018021506
git bisect good e7cdce1b2ad4b577cb6241db3d8dbc775dc01ec7 # 11:39 G 11 0 0 0 Merge 'linux-review/Dave-Airlie/virgl-fix-caps-ioctl-size-check/20180214-005246' into devel-hourly-2018021506
git bisect good 34d618fa50138fe7c8a2c3f458f03a3fdc16ce58 # 11:59 G 11 0 1 1 Merge 'linux-review/Prashant-Bhole/bpf-samples-sockmap-detach-sock-ops-program/20180214-152822' into devel-hourly-2018021506
git bisect good b79dc04302ffa70a44c9c178e1fbd1307fad1d9c # 12:17 G 11 0 3 3 Merge 'linux-review/Matthew-Wilcox/mm-Split-page_type-out-from-_map_count/20180212-170229' into devel-hourly-2018021506
git bisect bad 6cc10910d0bac228773d886833f6e7b6bdeea1eb # 12:25 B 0 11 24 0 Merge 'fsgsbase/fsgs_tip_4.16-rc1_v8.2_' into devel-hourly-2018021506
git bisect good 0fe911f8f10cc425c2cd58059703331531732bd0 # 12:42 G 11 0 0 0 x86/fsgsbase/64: Add intrinsics/macros for new RD/WR FS/GS BASE instructions
git bisect good 933dd6ee56c2efbc86ce04bd2284d525b69aab6e # 12:55 G 11 0 3 3 x86/fsgsbase/64: Support legacy behavior for selector update in ptrace
git bisect good 3f2ca6effb5190bf96f185bc57c92b924a11edfd # 13:11 G 11 0 2 2 attempt to fix non-smp
git bisect bad 64245e924e50a5bd1d50626b1374aa1a75773395 # 13:18 B 0 2 15 0 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
# first bad commit: [64245e924e50a5bd1d50626b1374aa1a75773395] x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
git bisect good 3f2ca6effb5190bf96f185bc57c92b924a11edfd # 13:34 G 32 0 0 2 attempt to fix non-smp
# extra tests with debug options
git bisect bad 64245e924e50a5bd1d50626b1374aa1a75773395 # 13:44 B 0 11 24 0 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
# extra tests on HEAD of linux-devel/devel-hourly-2018021506
git bisect bad 9caf74006e1099c41ffb488a575031ec11f66353 # 13:44 B 0 13 38 8 0day head guard for 'devel-hourly-2018021506'
# extra tests on tree/branch fsgsbase/fsgs_tip_4.16-rc1_v8.2_
git bisect bad 64245e924e50a5bd1d50626b1374aa1a75773395 # 13:49 B 0 11 25 0 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
# extra tests with first bad commit reverted
git bisect good b34e057d863f43bf341b732ed35cf97d35d16dba # 14:18 G 11 0 2 2 Revert "x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit"
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 6 months
[x86/fsgsbase/64] 6d06450ebc: double_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-6):
commit: 6d06450ebc461de2112061f005a9685a4865e0cc ("x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit")
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu IvyBridge -m 420M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------+------------+------------+
| | b72ce564aa | 6d06450ebc |
+------------------------------------------+------------+------------+
| boot_successes | 9 | 4 |
| boot_failures | 0 | 4 |
| double_fault:#[##] | 0 | 4 |
| RIP:trace_hardirqs_off_caller | 0 | 4 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 4 |
+------------------------------------------+------------+------------+
[ 0.047802] ----------------
[ 0.048025] | NMI testsuite:
[ 0.048550] --------------------
[ 0.049024] remote IPI: ok |
[ 0.049622] local IPI:
[ 0.049669] double fault: 0000 [#1] SMP KASAN
[ 0.050000] Modules linked in:
[ 0.050000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.16.0-rc1-00013-g6d06450e #1
[ 0.050000] RIP: 0010:trace_hardirqs_off_caller+0x31/0x300
[ 0.050000] RSP: 0000:fffffe0000007000 EFLAGS: 00010006
[ 0.050000] RAX: 0000000000000003 RBX: 0000000000000001 RCX: ffffffffb92009e0
[ 0.050000] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffba0008e0
[ 0.050000] RBP: fffffe0000007018 R08: 0000000000000000 R09: 0000000000000000
[ 0.050000] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[ 0.050000] R13: ffffffffb9201982 R14: 0000000000000002 R15: dffffc0000000000
[ 0.050000] FS: 0000000000000000(0000) GS:ffff880013400000(0000) knlGS:0000000000000000
[ 0.050000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.050000] CR2: fffffe0000006ff8 CR3: 000000001026d000 CR4: 00000000001506f0
[ 0.050000] Call Trace:
[ 0.050000] Code: 00 00 fc ff df 48 89 e5 41 55 49 89 fd 48 c7 c7 e0 08 00 ba 41 54 53 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 <65> 48 8b 1c 25 80 ed 01 00 38 d0 7c 09 84 d2 74 05 e8 e9 8c 27
[ 0.050000] RIP: trace_hardirqs_off_caller+0x31/0x300 RSP: fffffe0000007000
[ 0.050000] ---[ end trace 48e2dd56222795c7 ]---
[ 0.050000] Kernel panic - not syncing: Fatal exception
Elapsed time: 10
#!/bin/bash
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
fa87cf4e85 ("x86/fsgsbase/64: Enable FSGSBASE by default and .."): PANIC: double fault, error_code: 0x0
by kernel test robot
Greetings,
0day kernel testing robot got the below dmesg and the first bad commit is
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8
commit fa87cf4e8565d05720121961f6d349291327f6a9
Author: Andy Lutomirski <luto(a)kernel.org>
AuthorDate: Thu Apr 14 20:24:06 2016 -0700
Commit: Chang S. Bae <chang.seok.bae(a)intel.com>
CommitDate: Tue Feb 13 09:15:13 2018 -0800
x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
Now that FSGSBASE is fully supported, remove unsafe_fsgsbase, enable
FSGSBASE by default, and add nofsgsbase to disable it.
Signed-off-by: Andy Lutomirski <luto(a)kernel.org>
Reviewed-by: Andi Kleen <ak(a)linux.intel.com>
Cc: Chang S. Bae <chang.seok.bae(a)intel.com>
Cc: H. Peter Anvin <hpa(a)zytor.com>
fe7a327c98 selftests/x86/fsgsbase: Test WRGSBASE
fa87cf4e85 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
371b89b430 x86/fsgsbase/64: Add documentation for FSGSBASE
+-----------------------------------------+------------+------------+------------+
| | fe7a327c98 | fa87cf4e85 | 371b89b430 |
+-----------------------------------------+------------+------------+------------+
| boot_successes | 34 | 4 | 0 |
| boot_failures | 0 | 11 | 11 |
| PANIC:double_fault | 0 | 11 | 11 |
| RIP:async_page_fault | 0 | 11 | 11 |
| Kernel_panic-not_syncing:Machine_halted | 0 | 11 | 11 |
| RIP:kvm_read_and_reset_pf_reason | 0 | 11 | 11 |
+-----------------------------------------+------------+------------+------------+
[ 0.036797] ----------------
[ 0.037005] | NMI testsuite:
[ 0.037586] --------------------
[ 0.038005] remote IPI: ok |
[ 0.038647] local IPI:
[ 0.038667] PANIC: double fault, error_code: 0x0
[ 0.039000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.16.0-rc1-00013-gfa87cf4 #1
[ 0.039000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.039000] RIP: 0010:async_page_fault+0x11/0x60
[ 0.039000] RSP: 0000:fffffe0000006f88 EFLAGS: 00010046
[ 0.039000] RAX: 00000000aec009b7 RBX: 0000000000000001 RCX: ffffffffaec009b7
[ 0.039000] RDX: ffff88001f800000 RSI: 0000000000000000 RDI: fffffe0000007048
[ 0.039000] RBP: 000000000000f040 R08: ffffffffaf42c1f8 R09: 0000000000000000
[ 0.039000] R10: ffffffffaf603544 R11: 5049206c61636f6c R12: 0000000000000002
[ 0.039000] R13: 0000000000000000 R14: 0000000016610001 R15: 0000000000000000
[ 0.039000] FS: 0000000000000000(0000) GS:ffff88001f800000(0000) knlGS:0000000000000000
[ 0.039000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.039000] CR2: fffffe0000006f78 CR3: 0000000016610001 CR4: 00000000001706f0
[ 0.039000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.039000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.039000] Call Trace:
[ 0.039000] Code: ff e8 bf 7f 63 ff e9 af 02 00 00 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 83 c4 88 f6 84 24 88 00 00 00 03 75 20 <e8> 8a 01 00 00 48 89 e7 48 8b 74 24 78 48 c7 44 24 78 ff ff ff
[ 0.039000] Kernel panic - not syncing: Machine halted.
[ 0.039000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.16.0-rc1-00013-gfa87cf4 #1
[ 0.039000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.039000] Call Trace:
[ 0.039000] <#DF>
[ 0.039000] dump_stack+0x5d/0x79
[ 0.039000] panic+0xd3/0x21c
[ 0.039000] df_debug+0x24/0x24
[ 0.039000] do_double_fault+0xd4/0xe4
[ 0.039000] double_fault+0x22/0x30
[ 0.039000] RIP: 0010:async_page_fault+0x11/0x60
[ 0.039000] RSP: 0000:fffffe0000006f88 EFLAGS: 00010046
[ 0.039000] RAX: 00000000aec009b7 RBX: 0000000000000001 RCX: ffffffffaec009b7
[ 0.039000] RDX: ffff88001f800000 RSI: 0000000000000000 RDI: fffffe0000007048
[ 0.039000] RBP: 000000000000f040 R08: ffffffffaf42c1f8 R09: 0000000000000000
[ 0.039000] R10: ffffffffaf603544 R11: 5049206c61636f6c R12: 0000000000000002
[ 0.039000] R13: 0000000000000000 R14: 0000000016610001 R15: 0000000000000000
[ 0.039000] ? native_iret+0x7/0x7
[ 0.039000] RIP: 0010:kvm_read_and_reset_pf_reason+0x0/0x20
[ 0.039000] RSP: 0000:fffffe0000007030 EFLAGS: 00010097
[ 0.039000] </#DF>
# HH:MM RESULT GOOD BAD GOOD_BUT_DIRTY DIRTY_NOT_BAD
git bisect start 608aa6c7bbf75b29c7ea24021f77525f3b5c7111 7928b2cbe55b2a410a0f5c1f154610059c57b1b2 --
git bisect bad c21e6b52bd2b138eeb127ced51a56f4dbaaa357a # 20:42 B 0 11 25 0 Merge 'pm/testing' into devel-catchup-201802141049
git bisect bad 020ea641622b67c9f3b6d7d15c7d65a7987d3200 # 20:50 B 0 11 25 0 Merge 'fsgsbase/fsgs_tip_4.16-rc1_v8' into devel-catchup-201802141049
git bisect good 6f157c32b86f45513568625b64ba2c4b917fb6eb # 21:03 G 11 0 0 0 Merge 'mcgrof/20180213-firmware-dev-for-v4.17' into devel-catchup-201802141049
git bisect good 9eeb514842a35b3c326c8089def6a104b9b88ca8 # 21:16 G 11 0 2 2 Merge 'jpoimboe/TODO-paranoid-exit-cr3-fix' into devel-catchup-201802141049
git bisect good 50b8c305ee5fa2ef79205633b18c3f416d7e95d7 # 21:28 G 11 0 2 2 Merge 'jcmvbkbc-xtensa/xtensa-for-next' into devel-catchup-201802141049
git bisect good 84d19217ae35091c71778b2ad63dac23f346ebd2 # 21:39 G 11 0 2 2 Merge 'gfs2/for-next' into devel-catchup-201802141049
git bisect good d577744ebfbd63aa1e831b0b05c3851eb2ffb22a # 21:51 G 11 0 2 2 x86/fsgsbase/64: Enable FSGSBASE instructions in relevant helpers
git bisect good fe7a327c984c65d1ab2677eb8e0981a00120f494 # 22:03 G 11 0 0 0 selftests/x86/fsgsbase: Test WRGSBASE
git bisect bad 053a4515a71acfeebb78389ebf24af0a8b0e8add # 22:12 B 0 1 15 0 x86/elf: Enumerate kernel FSGSBASE capability in AT_HWCAP2
git bisect bad fa87cf4e8565d05720121961f6d349291327f6a9 # 22:33 B 0 11 25 0 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
# first bad commit: [fa87cf4e8565d05720121961f6d349291327f6a9] x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
git bisect good fe7a327c984c65d1ab2677eb8e0981a00120f494 # 22:36 G 31 0 1 1 selftests/x86/fsgsbase: Test WRGSBASE
# extra tests with debug options
git bisect bad fa87cf4e8565d05720121961f6d349291327f6a9 # 22:47 B 0 11 25 0 x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit
# extra tests on HEAD of linux-devel/devel-catchup-201802141049
git bisect bad 608aa6c7bbf75b29c7ea24021f77525f3b5c7111 # 22:47 B 0 12 29 0 0day head guard for 'devel-catchup-201802141049'
# extra tests on tree/branch fsgsbase/fsgs_tip_4.16-rc1_v8
git bisect bad 371b89b430e7c224082e1041a773b2b40b9a472b # 23:04 B 0 11 25 0 x86/fsgsbase/64: Add documentation for FSGSBASE
---
0-DAY kernel test infrastructure Open Source Technology Center
https://lists.01.org/pipermail/lkp Intel Corporation
4 years, 6 months
[x86/fsgsbase/64] cbc860777d: double_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: cbc860777d594bdfdad57f0c40a0c366750d1098 ("x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit")
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 1G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------+------------+------------+
| | 3861f30b84 | cbc860777d |
+------------------------------------------------+------------+------------+
| boot_successes | 4 | 4 |
| boot_failures | 4 | 4 |
| BUG:soft_lockup-CPU##stuck_for#s | 4 | |
| RIP:__sanitizer_cov_trace_pc | 2 | |
| Kernel_panic-not_syncing:softlockup:hung_tasks | 4 | |
| RIP:parman_lsort_item_remove | 2 | |
| double_fault:#[##] | 0 | 4 |
| RIP:do_async_page_fault | 0 | 4 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 4 |
+------------------------------------------------+------------+------------+
[ 0.090015] smpboot: Max logical packages: 2
[ 0.090501] ----------------
[ 0.090831] | NMI testsuite:
[ 0.091166] --------------------
[ 0.091549] remote IPI:
[ 0.083369] double fault: 0000 [#1] SMP DEBUG_PAGEALLOC PTI
[ 0.084267] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.16.0-rc1-00013-gcbc8607 #1
[ 0.085287] RIP: 0010:do_async_page_fault+0x0/0x8c
[ 0.085834] RSP: 0000:fffffe0000033000 EFLAGS: 00010093
[ 0.086458] RAX: 0000000082a009f0 RBX: 0000000000000001 RCX: ffffffff82a009f0
[ 0.087202] RDX: ffff880036d00000 RSI: 0000000000000000 RDI: fffffe0000033008
[ 0.088004] RBP: fffffe00000330d8 R08: 00000000c5610c9a R09: 0000000000000002
[ 0.088841] R10: 0000000000000001 R11: ffff8800368b40c0 R12: 0000000000000001
[ 0.089715] R13: 0000000000000000 R14: 0000000003838001 R15: 0000000000000000
[ 0.090000] FS: 0000000000000000(0000) GS:ffff880036d00000(0000) knlGS:0000000000000000
[ 0.090000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.090000] CR2: fffffe0000032ff8 CR3: 0000000003838001 CR4: 00000000001706a0
[ 0.090000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.090000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.090000] Call Trace:
[ 0.090000] Code: 7c ff ff ff e8 e0 fa ff ff eb c9 65 8b 15 4e 55 fe 7e 31 c0 85 d2 74 12 65 8b 05 01 55 fe 7e 65 c7 05 f6 54 fe 7e 00 00 00 00 c3 <55> 53 48 89 fd e8 d6 ff ff ff 83 f8 01 74 0c 83 f8 02 74 5b 5b
[ 0.090000] RIP: do_async_page_fault+0x0/0x8c RSP: fffffe0000033000
[ 0.090000] ---[ end trace 5b528005c1e3dfc2 ]---
[ 0.090000] Kernel panic - not syncing: Fatal exception
Elapsed time: 10
#!/bin/bash
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[x86/fsgsbase/64] cbc860777d: double_fault:#[##]
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: cbc860777d594bdfdad57f0c40a0c366750d1098 ("x86/fsgsbase/64: Enable FSGSBASE by default and add a chicken bit")
https://github.com/changbae/FSGSBASE fsgs_tip_4.16-rc1_v8
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-x86_64 -enable-kvm -cpu host -smp 2 -m 1G
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+------------------------------------------------+------------+------------+
| | 3861f30b84 | cbc860777d |
+------------------------------------------------+------------+------------+
| boot_successes | 4 | 4 |
| boot_failures | 4 | 4 |
| BUG:soft_lockup-CPU##stuck_for#s | 4 | |
| RIP:__sanitizer_cov_trace_pc | 2 | |
| Kernel_panic-not_syncing:softlockup:hung_tasks | 4 | |
| RIP:parman_lsort_item_remove | 2 | |
| double_fault:#[##] | 0 | 4 |
| RIP:do_async_page_fault | 0 | 4 |
| Kernel_panic-not_syncing:Fatal_exception | 0 | 4 |
+------------------------------------------------+------------+------------+
[ 0.090015] smpboot: Max logical packages: 2
[ 0.090501] ----------------
[ 0.090831] | NMI testsuite:
[ 0.091166] --------------------
[ 0.091549] remote IPI:
[ 0.083369] double fault: 0000 [#1] SMP DEBUG_PAGEALLOC PTI
[ 0.084267] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.16.0-rc1-00013-gcbc8607 #1
[ 0.085287] RIP: 0010:do_async_page_fault+0x0/0x8c
[ 0.085834] RSP: 0000:fffffe0000033000 EFLAGS: 00010093
[ 0.086458] RAX: 0000000082a009f0 RBX: 0000000000000001 RCX: ffffffff82a009f0
[ 0.087202] RDX: ffff880036d00000 RSI: 0000000000000000 RDI: fffffe0000033008
[ 0.088004] RBP: fffffe00000330d8 R08: 00000000c5610c9a R09: 0000000000000002
[ 0.088841] R10: 0000000000000001 R11: ffff8800368b40c0 R12: 0000000000000001
[ 0.089715] R13: 0000000000000000 R14: 0000000003838001 R15: 0000000000000000
[ 0.090000] FS: 0000000000000000(0000) GS:ffff880036d00000(0000) knlGS:0000000000000000
[ 0.090000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 0.090000] CR2: fffffe0000032ff8 CR3: 0000000003838001 CR4: 00000000001706a0
[ 0.090000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 0.090000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 0.090000] Call Trace:
[ 0.090000] Code: 7c ff ff ff e8 e0 fa ff ff eb c9 65 8b 15 4e 55 fe 7e 31 c0 85 d2 74 12 65 8b 05 01 55 fe 7e 65 c7 05 f6 54 fe 7e 00 00 00 00 c3 <55> 53 48 89 fd e8 d6 ff ff ff 83 f8 01 74 0c 83 f8 02 74 5b 5b
[ 0.090000] RIP: do_async_page_fault+0x0/0x8c RSP: fffffe0000033000
[ 0.090000] ---[ end trace 5b528005c1e3dfc2 ]---
[ 0.090000] Kernel panic - not syncing: Fatal exception
Elapsed time: 10
#!/bin/bash
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months
[of] 965aa3fac0: BUG:sleeping_function_called_from_invalid_context_at_mm/slab.h
by kernel test robot
FYI, we noticed the following commit (built with gcc-7):
commit: 965aa3fac087bd026f614824b821ef0238e77d60 ("of: cache phandle nodes to decrease cost of of_find_node_by_phandle()")
url: https://github.com/0day-ci/linux/commits/frowand-list-gmail-com/of-cache-...
base: https://git.kernel.org/cgit/linux/kernel/git/robh/linux.git for-next
in testcase: trinity
with following parameters:
runtime: 300s
test-description: Trinity is a linux system call fuzz tester.
test-url: http://codemonkey.org.uk/projects/trinity/
on test machine: qemu-system-i386 -enable-kvm -smp 2 -m 320M
caused below changes (please refer to attached dmesg/kmsg for entire log/backtrace):
+----------------------------------------------------------------+------------+------------+
| | 3a6fbcb2e2 | 965aa3fac0 |
+----------------------------------------------------------------+------------+------------+
| boot_successes | 6 | 0 |
| boot_failures | 0 | 8 |
| BUG:sleeping_function_called_from_invalid_context_at_mm/slab.h | 0 | 8 |
+----------------------------------------------------------------+------------+------------+
[ 0.224970] BUG: sleeping function called from invalid context at mm/slab.h:419
[ 0.226666] in_atomic(): 1, irqs_disabled(): 1, pid: 1, name: swapper/0
[ 0.226666] 1 lock held by swapper/0/1:
[ 0.226666] #0: (devtree_lock){....}, at: [<ba54064f>] of_core_init+0x2c/0x120
[ 0.226666] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.15.0-rc3-00024-g965aa3f #2
[ 0.226666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014
[ 0.226666] Call Trace:
[ 0.226666] dump_stack+0x90/0xc1
[ 0.226666] ___might_sleep+0x116/0x12a
[ 0.226666] __might_sleep+0x6a/0x71
[ 0.226666] slab_pre_alloc_hook+0x34/0x3a
[ 0.226666] __kmalloc+0x5a/0x109
[ 0.226666] ? of_core_init+0x56/0x120
[ 0.226666] of_core_init+0x56/0x120
[ 0.226666] driver_init+0x3a/0x3c
[ 0.226666] kernel_init_freeable+0x81/0x182
[ 0.226666] ? rest_init+0xdc/0xdc
[ 0.226666] kernel_init+0xd/0xd5
[ 0.226666] ret_from_fork+0x19/0x24
[ 0.241320] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6370867519511994 ns
[ 0.243356] futex hash table entries: 512 (order: 4, 65536 bytes)
[ 0.250186] xor: measuring software checksum speed
[ 0.286678] pIII_sse : 9343.200 MB/sec
[ 0.320011] prefetch64-sse: 11689.200 MB/sec
[ 0.321792] xor: using function: prefetch64-sse (11689.200 MB/sec)
[ 0.323356] prandom: seed boundary self test passed
[ 0.327067] prandom: 100 self tests passed
[ 0.328603] pinctrl core: initialized pinctrl subsystem
[ 0.331923] NET: Registered protocol family 16
[ 0.336737] cpuidle: using governor menu
[ 0.340969] ACPI: bus type PCI registered
[ 0.343398] PCI: Using configuration type 1 for base access
[ 0.436695] raid6: mmxx1 gen() 2907 MB/s
[ 0.493355] raid6: mmxx2 gen() 3451 MB/s
[ 0.550029] raid6: sse1x1 gen() 2757 MB/s
[ 0.606694] raid6: sse1x2 gen() 3498 MB/s
[ 0.663347] raid6: sse2x1 gen() 5895 MB/s
[ 0.720015] raid6: sse2x1 xor() 4209 MB/s
[ 0.776680] raid6: sse2x2 gen() 7216 MB/s
[ 0.833351] raid6: sse2x2 xor() 4559 MB/s
[ 0.834868] raid6: using algorithm sse2x2 gen() 7216 MB/s
[ 0.836529] raid6: .... xor() 4559 MB/s, rmw enabled
[ 0.836675] raid6: using intx1 recovery algorithm
[ 0.843471] ACPI: Added _OSI(Module Device)
[ 0.846675] ACPI: Added _OSI(Processor Device)
[ 0.848185] ACPI: Added _OSI(3.0 _SCP Extensions)
[ 0.850008] ACPI: Added _OSI(Processor Aggregator Device)
[ 0.866591] ACPI: Interpreter enabled
[ 0.866794] ACPI: (supports S0 S3 S5)
[ 0.868181] ACPI: Using IOAPIC for interrupt routing
[ 0.870131] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[ 0.875152] ACPI: Enabled 2 GPEs in block 00 to 0F
[ 0.935608] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[ 0.936701] acpi PNP0A03:00: _OSC: OS supports [Segments MSI]
[ 0.938597] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM
[ 0.940511] PCI host bridge to bus 0000:00
[ 0.943349] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window]
[ 0.945289] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window]
[ 0.946682] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[ 0.949313] pci_bus 0000:00: root bus resource [mem 0x14000000-0xfebfffff window]
[ 0.950022] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.953447] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 0.958202] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100
[ 0.962102] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180
[ 0.969205] pci 0000:00:01.1: reg 0x20: [io 0xc080-0xc08f]
[ 0.973389] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7]
[ 0.976678] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6]
[ 0.978604] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177]
[ 0.980009] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376]
[ 0.984299] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000
[ 0.986761] pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI
[ 0.989387] pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB
[ 0.991639] pci 0000:00:02.0: [1234:1111] type 00 class 0x030000
[ 0.996679] pci 0000:00:02.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref]
[ 1.003345] pci 0000:00:02.0: reg 0x18: [mem 0xfebf0000-0xfebf0fff]
[ 1.014696] pci 0000:00:02.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref]
[ 1.018248] pci 0000:00:03.0: [8086:100e] type 00 class 0x020000
[ 1.023352] pci 0000:00:03.0: reg 0x10: [mem 0xfebc0000-0xfebdffff]
[ 1.033133] pci 0000:00:03.0: reg 0x14: [io 0xc000-0xc03f]
[ 1.050890] pci 0000:00:03.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref]
[ 1.060444] pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000
[ 1.066682] pci 0000:00:04.0: reg 0x10: [io 0xc040-0xc07f]
[ 1.076693] pci 0000:00:04.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff]
[ 1.100012] pci 0000:00:04.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref]
[ 1.114367] pci 0000:00:05.0: [8086:25ab] type 00 class 0x088000
[ 1.120936] pci 0000:00:05.0: reg 0x10: [mem 0xfebf2000-0xfebf200f]
[ 1.144467] pci_bus 0000:00: on NUMA node 0
[ 1.151614] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11)
[ 1.154737] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11)
[ 1.157861] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11)
[ 1.160975] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11)
[ 1.166813] ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
[ 1.173478] pci 0000:00:02.0: vgaarb: setting as boot VGA device
[ 1.175299] pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 1.176692] pci 0000:00:02.0: vgaarb: bridge control possible
[ 1.178458] vgaarb: loaded
[ 1.190067] EDAC MC: Ver: 3.0.0
[ 1.193600] EDAC DEBUG: edac_mc_sysfs_init: device mc created
[ 1.199892] PCI: Using ACPI for IRQ routing
[ 1.200009] PCI: pci_cache_line_size set to 32 bytes
[ 1.201544] e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff]
To reproduce:
git clone https://github.com/intel/lkp-tests.git
cd lkp-tests
bin/lkp qemu -k <bzImage> job-script # job-script is attached in this email
Thanks,
lkp
4 years, 6 months